summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Move ldap provider access functionsSimo Sorce2013-01-213-59/+87
| | | | | | It was confusing to see the ldap provider own handler mixed with the generic ldap access code used also by the ipa and ad providers. So move the ldap provider handler code in its own file.
* TOOLS: invalidate parent groups in memory cache, tooJakub Hrozek2013-01-214-8/+71
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1775 In addition to invalidating the group being added to when adding a member group/user, we also need to invalidate all its parent groups, otherwise this getgrnam("parent") wouldn't report the members newly added to its child groups.
* LDAP: Compare lists of DNs when saving autofs entriesJakub Hrozek2013-01-213-143/+178
| | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1758 The autofs entries do not have the key as an unique identifier, but rather the full (key, value) tuple as some keys have a special meaning, such as the direct mount key (/-) and may be present in a single map multiple times. Comparing the full DN that contains both the key and the value will allow for working updates if either key or value changes.
* set struct bet_info->bet_typePavel Březina2013-01-191-0/+1
|
* Invalidate user entry even if there are no groupsJakub Hrozek2013-01-162-11/+8
| | | | | | | | | Related to https://fedorahosted.org/sssd/ticket/1757 Previously we would optimize the mc invalidate code for cases where the user was a member of some groups. But if the user was removed from the server while being in memory cache, we would only invalidate the mc record if he was a member of at least one supplementary group.
* NSS: invalidate memcache user entry on initgr, tooJakub Hrozek2013-01-161-0/+11
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1757 When the user entry was missing completely after initgroups, we would never invalidate the user entry from cache. This led to dangling cache entried in memory cache if the user was removed from the server while still being in memory cache.
* Remove outdated code.Simo Sorce2013-01-161-10/+0
| | | | | This code should not be necessary anymore since June 2010 with commit: 90acbcf20b5f896ca8f631923afe946c90d90de7
* Tidy up BASE dn macrosSimo Sorce2013-01-161-4/+4
|
* tools: Respect use_fully_qualified_namesMichal Zidek2013-01-161-0/+9
| | | | | | | Tools for LOCAL domain should require FQDN if option 'use_fuly_quallified_names = TRUE' was configured. https://fedorahosted.org/sssd/ticket/1746
* sss_cache: Call DEBUG_INIT soonerMichal Zidek2013-01-161-2/+3
| | | | | | | | If bad parameteres were passed to sss_cache, the init function returned without calling DEBUG_INIT macro and unnecessary level 1 debug message was printed. https://fedorahosted.org/sssd/ticket/1745
* autofs: Use SAFEALIGN_SET_UINT32 instead of SAFEALIGN_COPY_UINT32Jakub Hrozek2013-01-161-10/+5
|
* Correct format security for talloc_named of auth tokensStephen Gallagher2013-01-161-1/+1
|
* LDAP: avoid complex realloc logic in save_rfc2307bis_group_membershipsJakub Hrozek2013-01-151-12/+4
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1761 The function tried to be smart and realloc only when needed, but that only lead to hard-to find bugs where the logic would not allocate the proper space. Remove the reallocation and prefer readability over speed in this case.
* TOOLS: Refresh memcache after changes to local users and groupsJakub Hrozek2013-01-153-2/+50
|
* TOOLS: Provide a convenience function to refresh a list of groupsJakub Hrozek2013-01-152-0/+22
|
* TOOLS: Split querying nss responder into a separate functionJakub Hrozek2013-01-155-38/+79
| | | | | | The tools query the responder in order to sync the memcache after performing changes to the local database. The functions will be reused by other tools so I split them into a separate functions.
* TOOLS: move memcache related functions to tools_mc_utils.cJakub Hrozek2013-01-154-161/+189
| | | | | | | The upcoming patches will link only users of this file with client libs, so it's better to have it separate. There is no functional change in this patch
* TOOLS: set domain in check_group_namesJakub Hrozek2013-01-151-0/+1
|
* tests: unit test for sysdb_remove_attrsJakub Hrozek2013-01-151-0/+45
|
* tests: add unit test for sysdb_get_new_idJakub Hrozek2013-01-151-1/+20
|
* tests: test sysdb_initgroupsJakub Hrozek2013-01-151-0/+48
|
* tests: adda a unit test for test_sysdb_search_groupsJakub Hrozek2013-01-151-0/+29
|
* tests: unit test for test_sysdb_search_usersJakub Hrozek2013-01-151-0/+31
|
* tests: add a unit test for sysdb_netgroup_base_dnJakub Hrozek2013-01-151-0/+23
|
* Stop creating fake sysdb contextsSimo Sorce2013-01-153-32/+2
| | | | | | Now that the sysdb context does not contain anymore domain related data we can simply stop creating faxe sysdb context and just reference the parent context.
* Kill sysdb->domainSimo Sorce2013-01-153-5/+0
| | | | Finally remove this upside-down dependency.
* Move mpg flag to the domain where it belongsSimo Sorce2013-01-158-16/+13
| | | | | A sysdb contains now multiple domains, but the mpg property is a property of a specific domain not of the underlying database.
* Pass the domain to upgrade functionsSimo Sorce2013-01-153-13/+17
|
* Add domain to some subdomain functionsSimo Sorce2013-01-154-8/+17
|
* Add domain arguments to sysdb sudo functionsSimo Sorce2013-01-157-39/+69
|
* Add domain arguments to sysdb ssh functionsSimo Sorce2013-01-155-14/+30
|
* Add domain arguments to sysdb services functionsSimo Sorce2013-01-158-49/+59
| | | | also fix sysdb_svc_add declarations
* Add domain argument to sysdb selinux functionsSimo Sorce2013-01-156-21/+40
|
* Add domain argument to sysdb autofs functionsSimo Sorce2013-01-158-38/+68
|
* Add domain arguemnt to sysdb_get_real_name()Simo Sorce2013-01-153-2/+5
|
* Add domain argument to sysdb_idmap_ funcitonsSimo Sorce2013-01-153-14/+13
|
* Add domain argument to sysdb_remove_attrs()Simo Sorce2013-01-157-16/+21
|
* Add domain argument to sysdb_has/set_enumerated()Simo Sorce2013-01-156-15/+14
|
* Add domain arg to sysdb_search/delete_netgroup()Simo Sorce2013-01-157-12/+18
|
* Add domain argument to sysdb_delete_group()Simo Sorce2013-01-157-31/+20
| | | | Also remove sysdb_delete_domgroup()
* Add domain argument to sysdb_search_groups()Simo Sorce2013-01-158-12/+22
|
* Add domain argument to sysdb_delete_user()Simo Sorce2013-01-158-34/+32
| | | | Also remove sysdb_delete_domuser()
* Add domain arg to sysdb_search_users()Simo Sorce2013-01-159-19/+35
|
* Add domain to sysdb_delete_customSimo Sorce2013-01-156-5/+7
|
* Add domain argument to sysdb_search_custom()Simo Sorce2013-01-1515-22/+49
| | | | Also changes sysdb_search_custom_by_name()
* Add domain argument to sysdb_store_custom()Simo Sorce2013-01-157-6/+8
|
* Add domain argument to sysdb_cache_auth()Simo Sorce2013-01-155-9/+19
|
* Add domain argument to sysdb_cache_password()Simo Sorce2013-01-157-6/+12
|
* Add domain arg to sysdb group member functionsSimo Sorce2013-01-155-22/+37
|
* Add domain argument to sysdb_store_group()Simo Sorce2013-01-157-39/+26
| | | | Also remove sysdb_store_domgroup()